EIP-2026-109012

This exploit demonstrates a remote file inclusion vulnerability in KingCMS 0.6.0 due to improper input sanitization. An attacker can include arbitrary files by manipulating the CONFIG[AdminPath] parameter in the block.php script.